Skip to content
Documentation
Administration
Users and Roles

Users and Roles

User management in Mind One lets you control who accesses the platform, what actions they can take and which data they can operate on. The model is based on role-based access control (RBAC).

Inviting users

  1. From the sidebar, go to Users.
  2. Click Invite user.
  3. Enter the user’s email address and select the role to assign.
  4. Confirm. The user receives an invitation email with a link to accept.

The invited user can:

  • Create a new account: if they don’t have a Mind One account, they fill in a name and password.
  • Link an existing account: if they already have an account, they accept the invitation with their current credentials.

Resending an invitation

If the user didn’t receive the email or the link expired, you can resend the invitation from the user list.

Roles

Mind One defines five roles ordered from highest to lowest privilege. The role is assigned per account (tenant): the same user can have different roles in different accounts.

Admin

The account (tenant) administrator. Manages users, configuration, plan and billing, connections and every resource in the account.

Modeller

Creates and manages the data structure: workspaces, sheets (schema and data), value lists and groups. (Formerly called Configurator.)

Contributor

Edits data in existing sheets and value lists. Can’t modify the structure (schema) or create/delete resources. (Formerly called Editor.)

Data Explorer

Explores and analyzes data (analytics). Read access geared toward data exploration and study.

Data Viewer

Read-only access. Can view sheets, workspaces and the data catalog. (Formerly called Data Reader.)

Permission matrix

Resource / ActionAdminModellerContributorData ExplorerData Viewer
Workspaces — view✓✓✓✓✓
Workspaces — create/edit/delete✓✓———
Sheets — view✓✓✓✓✓
Sheets — create/manage schema✓✓———
Sheets — edit data✓✓✓——
Sheets — delete✓✓———
Sheets — import/export✓✓✓✓✓
Value Lists — view✓✓✓✓✓
Value Lists — create/edit/delete✓✓———
Analytics / exploration✓✓—✓✓
Connections — manage✓————
Users — manage✓————
Plan and billing✓————
Account configuration✓————
These are the same permissions applied by the public API and the MCP: the key inherits the user’s role, and that role determines what the agent can do.

Managing users

Changing a role

  1. From the user list, click the user.
  2. Select the new role.
  3. Permissions apply immediately.

Approving/Rejecting pending users

When a user signs up with a configured corporate domain, they’re left in a pending state until an administrator approves them:

  1. In the user list, filter by Pending status.
  2. Approve or reject each request.

Activate/Deactivate

Deactivating a user revokes their access without deleting their history. The user can be reactivated at any time.

Delete

Removes the user from the tenant. This action is permanent.

Plan limits

The maximum number of users depends on the tenant’s subscription plan. Once the limit is reached, no new invitations can be sent until the plan is upgraded or existing users are removed.

Related

Security